TekRADIUS is a RADIUS server for Windows with built-in DHCP server.

1. TekRADIUS Version 5.1 - Datasheet
© 2008-2013 KaplanSoft - http://www.kaplansoft.com/ 1
TekRADIUS - RADIUS Server for Windows
TekRADIUS is a RADIUS server for
Windows with built-in DHCP server.
TekRADIUS is tested on Microsoft
Windows XP, Vista, Windows 7/8
and Windows 2003/2008/2012
server.
TekRADIUS complies with RFC 2865 and RFC 2866. Tek-
RADIUS has two editions; TekRADIUS (First edition; sup-
ports Microsoft SQL Server) and TekRADIUS LT (Second
edition; supports SQLite). It runs as a Windows Service
and comes with a Win32 management interface.
Major Features
o Supports features described in RFC 2865 and
RFC 2866 (RADIUS protocol).
o Supports TCP (RFC 6613) and TLS (RFC 6614-
RadSec) transports.
o Logs system messages, errors and session infor-
mation to a log file rotated daily.
o Limits number of simultaneous sessions for the us-
ers.
o Uses Authentication method as a RADIUS check
item.
o RADIUS Dictionary can be edited through
TRManager GUI.
o Authentication and Accounting ports are user
selectable.
o You can create SQL database and tables
through TRManager GUI.
o You can map RADIUS accounting attributes to
Accounting table fields.
o TekRADIUS can be run in Authentication only or
Authorization only mode.
o You can define which RADIUS attribute will use
for User-Name substitute.
o You can define own Authorization query string.
o PAP, CHAP, MS-CHAP v1-v2, EAP-MD5, EAP-TLS,
EAP-SIM, EAP-MS-CHAP v2, LEAP, PEAP (PEAPv0-
EAP-MS-CHAP v2), EAP-TTLS and Digest (draft-
sterman-aaa-sip-00.txt) authentication methods
are supported.
o TekRADIUS can proxy RADIUS requests to other
RADIUS servers.
o TekRADIUS supports IPv6 attributes.
o Generates MS-MPPE Keys for VPN connections.
o Supports OTP (One Time Password) authentica-
tion based RFC 2289.
o Built-in DHCP server.
o You can specify an Expire Date and Time Quota
for the users.
o You can authenticate users against Windows
Domain or Active Directory.
o Command line utility for adding, deleting and
editing users and RADIUS clients.
o Simple reporting interface for browsing Ac-
counting records.
o Disconnects users with Packet of Disconnect
(Pod) or user defined kill command.
o You can specify how much time user account
will be valid after the first logon (Time-Limit) and
you can specify allowed logon days and hours
(Login-Time).
o Disabling user profile after user configurable
number of unsuccessful login attempts.
o You can specify credit limits for daily, weekly or
monthly periods.
o You can run and check result of an external ex-
ecutable as a check item.
o Quick and easy installation.

2. TekRADIUS Version 5.1 - Datasheet
© 2008-2013 KaplanSoft - http://www.kaplansoft.com/ 2
You can use TekRADIUS' built-in DHCP server to assign
IP addresses to your wired or wireless devices on your
network. Commercial editions of TekRADIUS provide a
unique feature; assignment of static IP addresses to
wired/wireless clients authenticated using EAP au-
thentication.
TekRADIUS – Active Sessions
TekRADIUS also supports RFC 2868 - RADIUS Attributes
for Tunnel Protocol Support and RFC 3079 - Deriving
Keys for use with Microsoft Point-to-Point Encryption
(MPPE). You can authenticate and authorize
PPTP/L2TP connections using TekRADIUS.
TekRADIUS - RADIUS Dictionary
TekRADIUS provides user level restriction to GUI access.
Windows users in "Administrators" group can access to
all functions on TekRADIUS Manager GUI but Windows
users in built-in "Users" group can access restricted set
of functions on TekRADIUS Manager GUI.
Please see TekRADIUS SP Rate Editor Manual for Tek-
RADIUS SP features.
System Requirements
1. A Windows system with 2 GBytes of RAM.
2. Microsoft.NET Framework 4.0 Client Profile
(Min.)
3. 10 MBytes of disk space.
4. Administrative privileges.
Supported Standards
RFC 2131 Dynamic Host Configuration Protocol
RFC 2865 RADIUS Authentication
RFC 2866 RADIUS Accounting
RFC 2617 HTTP Authentication: Basic and Digest Access Au-
thentication
RFC 2246 The TLS Protocol Version 1.0
RFC 4346 The TLS Protocol Version 1.1
RFC 5246 The TLS Protocol Version 1.2
RFC 2548 Microsoft Vendor-specific RADIUS Attributes
RFC 2867 RADIUS Accounting Modifications for Tunnel Pro-
tocol Support
RFC 2868 RADIUS Attributes for Tunnel Protocol Support
RFC 3162 RADIUS and IPv6
RFC 3580 IEEE 802.1X Remote Authentication Dial In User
Service (RADIUS) Usage Guidelines
RFC 3579 RADIUS (Remote Authentication Dial In User Ser-
vice) Support for Extensible Authentication Protocol (EAP)
RFC 4603 Additional Values for the NAS-Port-Type Attribute
RFC 4818 RADIUS Delegated-IPv6-Prefix Attribute
RFC 5281 EAP-TTLSv0
RFC 6613 RADIUS over TCP
RFC 6614 Transport Layer Security (TLS) Encryption for RA-
DIUS
RFC 6911 RADIUS Attributes for IPv6 Access Networks
draft-kamath-pppext-eap-mschapv2-02.txt Microsoft EAP
CHAP Extensions
draft-kamath-pppext-peapv0-00.txt Microsoft PEAP version
0 (As implemented in Windows XP SP1’)
Kaplan Bilişim Teknolojileri Yazılım ve Ticaret Ltd.
Oğuz Sk. No:5/29 Mecidiyeköy, Şişli, 34387, İstanbul
Phone: +90 (212) 356 12 12, E-mail: info@kaplansoft.com / sales@kaplansoft.com